TikTok phishing: How to spot fake login and verification pages

Phishing pages don’t need to be sophisticated. They just need to look convincing enough to make you trust them. TikTok phishing often starts with an email or message designed to make you think you need to act on your account. It might claim your account has been suspended, reported, or hit with a copyright violation, or tell you that you’re eligible for verification. The link might take you directly to a page made to look like TikTok’s login screen. If you enter your information, it can be sent straight to the scammers, including your phone number or email, password, and potentially a one-time authentication code. With access to your account, scammers could impersonate you, target your contacts, or try to use the same password to break into your other accounts. What to do if you get a suspicious TikTok message If you get an unexpected email or message telling you to log in to TikTok, don’t use the link it provides. Open the real TikTok app or go directly to tiktok.com instead and check your account there. If you’ve already entered your login information on a suspicious page, change your TikTok password immediately and check for any devices or login activity you don’t recognize. Fake warnings and verification offers Not every TikTok phishing link leads directly to a fake login screen. Some try to scare you with claims that your account has been suspended or reported, or that you’ve received a copyright or community-guidelines strike that needs “resolving.” Others offer something you might want, such as a verified badge, creator payout, or brand deal. For example, a fake TikTok Verification Center might congratulate you on your performance and tell you that you’re eligible for a verified badge: Another fake verification page asks for account information as part of a supposed verification request: Whether the message threatens you with a problem or promises you a reward, the aim is the same: to persuade you to interact with a fake TikTok page and hand over information. Why these TikTok scams work Fake TikTok pages can look convincing because copying the appearance of a real website is relatively easy. But the story that gets you there is just as important. Suspension and copyright warnings create urgency. Verification and monetization offers create an incentive. Both give you a reason to act quickly instead of stopping to check where the link has actually taken you. How to protect your TikTok account Don’t use links in unexpected emails or messages asking you to log in to TikTok. Open the TikTok app or go directly to tiktok.com instead Treat any message about a suspension, strike, or verification eligibility as unverified until you’ve confirmed it inside the TikTok app itself Check the address bar before entering your login information. Make sure you’re actually on tiktok.com—a fake page can look almost identical to the real thing Use a password manager where possible. It won’t auto-fill your TikTok password on a different domain, which is a useful warning sign Turn on two-factor authentication (2FA) on your real TikTok account so a stolen password alone isn’t enough to get in If you’ve already entered your login information on a page like this, change your TikTok password immediately and check for any login activity or devices you don’t recognize Use Malwarebytes Mobile Security to help block phishing and malicious websites on your phone Whatever story the message tells you, don’t use its link to log in. Open TikTok yourself and check your account there. Scammers know more about you than you think. Malwarebytes Mobile Security protects you from phishing, scam texts, malicious sites, and more. With real-time AI-powered Scam Guard built right in. Download for iOS → Download for Android → About the author Stefan Dasic Sr. Malware Research Engineer/Web Protection Technical Lead, ThreatLabs Passionate about antivirus solutions, Stefan has been involved in malware testing and AV product QA from an early age. As part of the Malwarebytes team, Stefan is dedicated to protecting customers and ensuring their security.